https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:18:02.700818+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:1469 ALSA-2023:1469 — Important: kernel-rt security and bug fix update 2026-10-03T14:18:02.774936+00:00

Affected: AlmaLinux:9: kernel-rt, AlmaLinux:9: kernel-rt-core, AlmaLinux:9: kernel-rt-debug, AlmaLinux:9: kernel-rt-debug-core, AlmaLinux:9: kernel-rt-debug-devel, AlmaLinux:9: kernel-rt-debug-kvm, AlmaLinux:9: kernel-rt-debug-modules, AlmaLinux:9: kernel-rt-debug-modules-extra, AlmaLinux:9: kernel-rt-devel, AlmaLinux:9: kernel-rt-kvm and 2 more

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744) * ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266) * kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z3 Batch (BZ#2170460)

 https://cve.radiocsirt.org/vuln/bdu:2023-00382 bdu:2023-00382 2026-10-03T14:18:02.775034+00:00 bdu:2023-00382 https://cve.radiocsirt.org/vuln/bell-cve-2023-0266 Withdrawn: BELL-CVE-2023-0266 — CVE-2023-0266 does not affect BellSoft software 2026-10-03T14:18:02.775052+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0066 certfr-2023-avi-0066 — De multiples vulnérabilités ont été corrigées dans <span class="textit">le noyau Linux de SUSE</span>. Elles permettent… 2026-10-03T14:18:02.775068+00:00 certfr-2023-avi-0066 https://cve.radiocsirt.org/vuln/cnvd-2023-58991 cnvd-2023-58991 2026-10-03T14:18:02.775083+00:00 cnvd-2023-58991 https://cve.radiocsirt.org/vuln/euvd-2026-255785 EUVD-2026-255785 2026-10-03T14:18:02.775094+00:00 EUVD-2026-255785 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0266 fkie_cve-2023-0266 2026-10-03T14:18:02.775104+00:00

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e

 https://cve.radiocsirt.org/vuln/ghsa-h8jm-3c82-6vvq GHSA-h8jm-3c82-6vvq 2026-10-03T14:18:02.775126+00:00

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e

 https://cve.radiocsirt.org/vuln/gsd-2023-0266 gsd-2023-0266 2026-10-03T14:18:02.775141+00:00 gsd-2023-0266 https://cve.radiocsirt.org/vuln/msrc_cve-2023-0266 msrc_CVE-2023-0266 — Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel 2026-10-03T14:18:02.775152+00:00 msrc_CVE-2023-0266 https://cve.radiocsirt.org/vuln/oesa-2023-1198 OESA-2023-1198 — kernel security update 2026-10-03T14:18:02.775167+00:00

Affected: openEuler:20.03-LTS-SP3: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e(CVE-2023-0266)

 https://cve.radiocsirt.org/vuln/rhsa-2023:1202 RHSA-2023:1202 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-10-03T14:18:02.775188+00:00

kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c kernel: net: CPU soft lockup in TC mirred egress-to-ingress action kernel: stack overflow in do_proc_dointvec and proc_skip_spaces kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF

 https://cve.radiocsirt.org/vuln/rhsa-2023:1470 RHSA-2023:1470 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-10-03T14:18:02.775218+00:00

kernel: net: CPU soft lockup in TC mirred egress-to-ingress action kernel: tun: avoid double free in tun_free_netdev kernel: x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF

 https://cve.radiocsirt.org/vuln/suse-su-2023:0152-1 SUSE-SU-2023:0152-1 — Security update for the Linux Kernel 2026-10-03T14:18:02.775277+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-0266 UBUNTU-CVE-2023-0266 2026-10-03T14:18:02.775305+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.4 and 118 more

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0112 WID-SEC-W-2023-0112 — Linux Kernel: Mehrere Schwachstellen 2026-10-03T14:18:02.775477+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und nicht spezifizierte Auswirkungen zu verursachen.